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A system for providing security and tracking data for rental video media, including digital video discs and digital video cassettes. 
Those new formats for video players and media allow for inclusion of security features which both allow tracking of rental of such media 
and prevent unauthorized rental thereof. Each player includes a decision circuit which plays a particular disc (or tape) only if a player 
identification number recorded on a special separate authorization memory card is the same as the player identification stored in the player, 
and if a movie identification number optically read from the disc matches a movie identification number recorded on the special card. A 
corresponding apparatus is provided at the video rental store which, at the time of rental, records on the authorization card in encrypted 
form the movie identification number and the number of the particular disc player for which that rental is intended. The encryption uses 
the private key of a public key system, the public key and the modulus being pre-recorded on die optical portion of the disc. 
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VIDEO MEDIA SECURITY AtfD TRACKING SYSTEM 
John O. Ryan 
E. Frasier Morrison 
Gregory C. Copeland 

BACKGRO UND OF THE INVENT TON 
Field o f the Invention 

This invention relates to security systems for 
video media and more particularly to a system for 
allowing an owner of copyrighted video material to 
control,^ on a per use basis, viewing of that material 
provided on a prerecorded m%dium such as a video disc 
or video tape cassette. 
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15 Descrip tion of the Prior Art 

As is well known, typically video tape cassettes 
or video discs containing prerecorded material such as 
movies are commercialized as follows. The owner of the 
copyrighted material on the video cassette or disc, 
i.e. the movie studio ("rights owner"), arranges for 
duplication of the movie onto a large number of video 
tape cassettes or discs. The video tape cassettes and 
discs are then sold by the movie studio to owners of 
video rental stores who then rent each video tape 
cassette or disc out as many times as they can, 
depending on demand. However, the owner of the video 
rental store only pays for each video tape cassette or 
disc once, because he has purchased it outright from 
the movie studio. Thus the bulk of the profits due to 
rental of such material accrue to the video rental 
store owner rather than to the movie studio. This is 
because the so-called "first sale doctrine" prevents 
the seller (the movie studio) of the video tape 
cassettes or discs from exercising any degree of 
control over the downstream commercialization (e.g., 
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electronics, thus effectively prohibiting further 
playing of that video tape cassette until it is 
•returned to the rental store for reprogramming of the 
circuit. Again, the reprogramming machine 
5 automatically records the reprogramming transaction. 
So far this proposal has limited support due to the 
cost of the circuit in the video tape cassette, 
possible consumer inconvenience if the circuit 
malfunctions, and the ease with which it could be 
10 cheated by the video store operator or so-called 

••hackers". (The term "hacker" herein refers to anyone 
attempting to defeat system security by technical 
means.) The same deficiencies apply to the non- 
rewindable cassette approach. The circuit inside the 
15 video cassette also requires provision of a battery to 
power such a circuit, with the attendant practical 
complications. 

Other proposals, involve mechanical or electronic 
counters installed in each video tape cassette to count 
20 the number of plays. Again, this is problematic if a 
particular renter might want to play the video tape 
cassette more than once, and also is easily overcome by 
tampering. 

It is to be understood that the video store owners 
interests in this regard are to a large extent the same 
as those of the rights owners. If a reliable system 
could be found to share rental revenues between the 
rights owners and the video store owners, then the 
rights owners would provide many more copies of each 
movie for rental to each store, hence increasing 
profits for both parties. 

None of the above security systems are feasible 
for use with, for instance, video discs, which are soon 
expected to become very popular in new digital formats. 
Additionally, it is to be understood that the 
deficiencies of the above systems are a consequence of 
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The next attribute is a high level of system 
security; the present system is believed to be 
impossible (or prohibitively expensive on a practical 
basis) for unscrupulous video rental store owners (or 
hackers in collusion with video rental store owners) to 
cheat on or to compromise. Thus in accordance with the 
invention the rights owners can be confident that they 
are properly recompensed for rental activity. in the 
event of any security breach, in accordance with the 
invention it is possible quickly and inexpensively to 
recover from the breach and minimize resulting losses. 
Also, in accordance with the invention, there is 
tracking system security, in that particular rights 
owners are assured that transaction data relating to 
their particular video material (movie titles) is not 
accessible by others. 

Another attribute is that the present system is 
operationally simple, providing minimum operational 
burden to the employees of the video rental store. 
Similarly, the users (renters) enjoy operational 
simplicity so that the system is essentially 
transparent to the renter of the video material and 
does not interfere with his enjoyment of the rented 
material . 

As a last attribute, the present system adds 
minimal cost both to the players and the media". In 
addition, the cost of the in-store transaction 
monitoring and reporting equipment is believed to be 
quickly recoverable. 

One embodiment in accordance with the present 
invention is directed to the digital video disc format 
medium. However, it is to be appreciated that the 
present invention is also applicable to systems using 
analog or digital video cassette tapes or analog video 
discs or other media using magnetic, optical or 
magneto-optical or other types of recording. This 
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that stored in a read only memory in the player, and 
also compares the program ID from the decryptor to the 
program ID provided from the prerecorded material. 
Only if both the two player identifications are 
authenticated (match) and the two program 
identifications are authenticated (match) , is the 
player enabled to play the prerecorded material. 

Of course if authorization data indicating that 
this is a sell-through (non-rental) disc is present on 
the disc, i.e. there is a authorization indication to 
play, then even if no program or player identification 
matches are made, the player is enabled to play the 
prerecorded program material. 

Also therefore in accordance with the invention is 
a method of operating the player to authorize its 
operation to play the prerecorded material. 

In an alternative embodiment, the authorization 
card is not used and instead a writable (e.g. magnetic) 
memory is located on the disc itself, by providing a 
narrow circular magnetic track near the center of the 
disc, to be read by a special magnetic head in each DVD 
player. 

The last element is the prerecorded media. In the 
case of the DVD disc, this is a video disc including 
(in the alternative embodiment) the magnetic track 
located at a convenient location, such as near the disc 
center. The magnetic track on the disc as it comes 
from the factory and is shipped to the video rental 
store is typically blank but has space sufficient to 
record on it the encrypted program identification and 
encrypted player identification. 

It is to be understood that hereinafter when 
reference is made to the authorization card, in the 
alternative embodiment this refers to the magnetic 
track on the disc or an equivalent for a video tape 
cassette. 
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DETAILED DESCRTPTION OF THE PRFFFRRED EMBODIMENTS 

In a Digital Video Disc (DVD) embodiment, each DVD 
player, which is otherwise of a conventional type 
recently announced, for instance, by Toshiba or Sony or 
any other type, includes embedded in an internal memory 
a stored identification. This identification (e.g., a 
number) need not necessarily be the same as the player 
serial number. This identification is e.g., at least 6 
or 8 decimal digits for best security. The player 
identification may have significantly fewer digits than 
the player serial number, for instance, having as 
little as two decimal digits at a penalty of reduced 
security. Thus the player identification need not be 
unigue to each digital video player, but is a number 
large enough so it is not likely to be easily 
duplicated amongst the number of individual DVD players 
which a hacker may encounter. 

Each corresponding digital video disc intended for 
the rental market includes, in addition to the normal 
optical prerecorded track in the alternative embodiment 
only, an additional narrow circular magnetic recording 
track located for instance near the center of the disc 
(this location is illustrative and not limiting) . This 
track need hold approximately only 100 bytes of data. 
The magnetic track is read by a magnetic read head 
provided in each DVD player in accordance with the 
present invention. It is to be understood that the 
industry proposed DVD players do not include the slot 
to accept the authorization card (or in the alternative 
embodiment the magnetic head) and associated circuitry, 
and the addition of these elements is a required 
modification to DVD players in order to practice the 
present invention. 

Each DVD disc intended for rental also will 
contain a number of extra bytes of information 
optically recorded during the conventional mastering of 
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instance be incorporated into other transaction 
reporting equipment already present in video rental 
stores, with appropriate features as described below. 

A conventional electronic clock in each TTRD 
records, for each rental transaction, the time and date 
of authorization and later records when the particular 
disc was returned to the rental store after the rental 
was completed. 

Each DVD player, which is otherwise conventional, 
also includes a decision circuit which allows that 
particular player to play a particular disc only if its 
player identification matches the authorized player 
identification read from the authorization card, and 
also if the movie identification optically read from 
the disc matches the movie identification read from the 
authorization card) . 

When a rental customer first becomes a customer at 
a particular rental outlet or rental chain, the 
customer provides the rental store employee with the 
player identification of the customer's own DVD player. 
This identification, along with e.g. the customer's 
name and/or telephone number, is entered into the TTRD 
via e.g. a standard keyboard interface or by a bar code 
reader. Thus for instance a particular customer can 
become a member, as now, at any number of rental stores 
and thereafter need only provide conventional 
information, i.e. name or telephone number or rental 
identification card, to rent a disc. 

When a particular disc is rented, it is inserted 
by the rental store employee into the TTRD which then 
optically reads from the disc the movie identification 
from the disc's initialization region and records it, 
along with the customer's player identification, on the 
authorization card. This operation is automatic and 
takes only a few seconds. 
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One added advantage of the present system is that 
it prohibits a particular renter from lending his 
rented disc (or tape) to a friend or relative, since 
only the particular renter's DVD player has been 
5 authorized to play any particular disc. This feature 
may advantageously generate extra rental transactions. 
If a particular customer owns more than one DVD player, 
the system accommodates this by allowing the 
recordation of more than one player identification on 
10 the authorization card (or on the disc magnetic track). 
The system prohibiting lending to a friend may then be 
circumvented by a customer listing his friend's player 
as his own. (This would of course be found out if the 
friend then were to rent a disc on his own from the 
same rental store or rental store chain.) 

A major advantage in accordance with the invention 
is that system security is maintained even though a 
hacker acquires complete knowledge of the security 
principles used and is also fully capable of probing 
the entire operational details of the authorization 
circuits in a particular DVD player. That is to say, 
the DVD player itself holds no secrets and yet the 
system is still secure. The security system has two 
aspects. The first is preventing illicit transactions. 
25 The second is restricting access to the transaction 
data in accordance with the transaction reporting 
system. Of these, the first is probably more 
important . 

In order to prevent illicit transactions, that is 
30 to prevent a hacker from designing a "black box" device 
to illicitly record authorization data on an 
authorization card, this data (the player and movie 
identification) is concatenated and encrypted and 
written on the authorization card (or on each disc) by 
35 the TTRD, using a public key encryption system. Such 
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The other type of data encryption uses a public 
key and is also referred to as asymmetrical encryption. 
Thus there are two different keys in such a system. 
The first is the private key, known only to authorized 
5 users as in the above described private key system;, the 
second key is the public key which may be widely known 
without risk of system penetration, i.e. hacking. One 
key (either key) is used for data encryption and the 
other key is used for decryption. An essential feature 
10 of all public key systems is that knowledge of the 

decryption key does not allow the hacker to encrypt a 
message and vice-versa. 

The most secure public key system commercially 
available is from a company called RSA Data of Redwood 
15 city, CA. The security of this system is predicated on 
the difficulty of factoring very large numbers, 
containing upwards of one hundred decimal digits. The 
fastest known factoring algorithm running on the 
fastest computers typically takes decades to factor 
20 such numbers. The larger the key, the more difficult 

factoring becomes. in practice, the size of the key is 
chosen to reduce the cost effectiveness of a factoring 
effort to unacceptable levels for a would-be hacker, 
throughout the expected life of the product and with 
25 due allowances for anticipated increases in computing 
power. ... 

In accordance with one embodiment of the present 
invention, the private key of the public key system is 
used for encryption. Thus this key is securely stored 

30 in each TTRD in such a manner that any attempt to 

extract the private key from the TTRD causes erasure of 
the key. This is relatively easy to accomplish since 
there are limited number of TTRD devices (typically one 
per rental store) each of which is electronically 

15 polled from time to time for ordinary transaction 

purposes. Hence any breach of security is likely to be 
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abnormal reduction in rental transaction reporting of 
particular movies released before the security breach 
occurred, from a particular rental store, would 
indicate that store was a possible illicit operator. 
5 In order to allow TTRDs to continue to authorize 

older movies after a new pair of keys is distributed, 
each TTRD would store the full history of keys used, ' 
organized by serial number, and automatically encrypt 
the data to be recorded on the authorization card with 
10 the appropriate private key. This is accomplished by 
appending. the key serial number to the public key 
recorded on the disc's optical track. The TTRD reads 
the serial number first and then selects the 
appropriate private key to perform the encryption from 
the set of private keys stored in the TTRD in its 
memory. 

The movie ID is both recorded optically on the 
disc and encrypted (along with the authorized player 
ID) on the authorization card for two reasons. The 
first reason is to permit TTRDs to track which 
particular movies are being rented. The second reason 
applies to system security; if data recorded on the 
authorization card were merely an encrypted instruction 
that would authorize any disc to be played by a DVD 
25 player having a particular identification, then that 

encrypted data stream could be obtained by a hacker and 
reused later. This would be done using a hacker's 
device to record the data stream on the authorization 
card. This would illicitly authorize playing of other 
movies by the same DVD player (that is, for the same 
customer) . 

A vital feature of a public key encryption system 
is that it is not possible to deduce what the encrypted 
data would be for a block of data which differs by as 
little as one bit from a block of data whose encrypted 
value is already known. In other words, knowing the 
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first embodiment using the authorization card, the TTRD 
includes a plug in socket for electrically connecting 
to the authorization card. In the second embodiment 
using a magnetic track on the disc, the TTRD includes a 
special recording head to record on the special 
magnetic track on the disc (or tape cassette) . 

The TTRD in either embodiment includes a port and 
loading mechanism such as those of a DVD player. The 
authorization card and the disc are ejected in a few 
seconds and the first part of the transaction is 
automatically recorded. When later on the renter 
returns the disc (or soon thereafter) the employee 
again inserts the disc in the TTRD and indicates the 
return transaction on its keyboard interface. The 
final part of the transaction, i.e. the time of disc 
return, is now recorded and the disc is again ejected 
and replaced on the store shelves. The authorization 
card is merely returned for later reuse. Transaction 
reporting to the rights owner or its agent is done 
automatically, for instance via modem and telephone 
lines, at a convenient time. Transaction reporting may 
also be done by other well known means. Thus the 
effort required of the video rental store employee is 
only slightly greater than that required in existing 
rental stores using point of sale terminals to store 
customer information and bar code readers to "Check out 
and check in video tape cassettes or discs. 

Additionally, customer convenience is provided in 
accordance with the invention. Additional effort 
required by the customer is that when he first signs on 
(becomes a member) at a particular rental store or 
rental store chain, the customer provides the store 
employee with his player identification (or 
identifications if he owns several players) . Each DVD 
player thus for convenience would be sold along with 
several cards printed with the player identification in 
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references herein to DVD players are because it is 
anticipated that the present invention is most likely 
to be adapted in such a new video media standard. 
However, the present invention is compatible with other 
5 video disc and tape formats. (Of course, present video 
disc and tape players do not include the circuitry 
needed to implement the present invention.) It is to 
be understood that the disc optical reader 12 includes 
conventional mechanical elements (not shown for 
10 simplicity) for spinning the disc 14. 

In the conventional operation of a DVD player, 
after insertion of the disc into the player, the player 
scans a region of the disc located near the center 
called the initialization region in order to obtain 
15 information about the contents of the disc recorded 

there which is typically presented on a display of the 
disc player. In accordance with the invention, this 
initialization region has recorded on it, in addition 
to the conventional information, the program (movie) 
identification, the rent/ sale indication and the 
decryption key which includes conventionally the key 
serial number, the public key, and the key modulus. 
Typically, the program identification need not be in 
alphanumeric form but may be merely a code number i.e., 
a 6 or 8 decimal digit code. It might be as few as 4 
decimal digits to uniquely identify for instance each 
movie released during a period of several years. 

The disc optical reader 12 reads from the 
optically recorded portion of the disc 14 via 
conventional laser reading mechanism 18 two pieces of 
data; these are (1) the key serial number, the public 
decryption key, and modulus and (2) a program 
identification number. This data is located as 
described above in the initialization region of the 
disc which already contains formatting information 
pertaining to the disc contents. 
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magnetic track of the disc without using the TTRD, i.e. 
bypassing the TTRD, and thus cheating the rights owner 
by not recording the particular rental transaction. 
Thus by providing a piece of information which is 
unique to each rental transaction (a program 
identification number) and given the use of a public 
key system, it is made impossible for a hacker to 
determine what the encoded data would be for a 
different movie for the same player, due to the nature 
of public key encryption systems. 

Thus it is to be understood that information other 
than the program identification could be used for this 
purpose. That is, when each particular optical disc is 
produced, instead of providing on the optical track a 
program (movie) code number, instead a random number is 
provided. Then the TTRD would read this random number, 
encrypt it and record the encrypted random number on 
the authorization medium. Thus the term "program 
identification" used herein does not refer necessarily 
to a number used universally for all discs carrying a 
particular movie, but instead to any number or 
information pertaining to a particular disc or video 
tape. Thus the program identification need not be 
unique to each movie; possibly a limited field with few 
as e.g., numbers 0 to 100 would be adequate to provide 
security, even though thus several movies might have 
identical program identifications. Thus for purposes 
of security alone, the program identification need not 
be a movie (title) identification. However, to 
maximize security, each movie should have a unique 
identification number. 

Encryptor 26 then encrypts this data and provides 
it to a data coder 34 which formats and codes the data 
into a particular conventional modulation scheme as 
desired. Authorization card 3 5 is connected to data 
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transaction data to a central tracking computer, for 
instance for each movie studio, via telephone lines. 
It is to be understood that the tracking and recording 
portion 52 is not needed for security reasons but is 
5 provided for commercial reasons to allow each movie 

studio to determine the number of rentals of its films. 

In this system the particular player number is 
purposely not provided to the data coder and formatter 
46. Such could be done but it is not believed 
10 necessary for commercial tracking purposes. By not 

providing, such information, a greater degree of privacy 
is provided to the rental customer. 

It is to be understood that with minor 
modifications, the TTRD of Figure 1 is suitable for use 
15 with a video cassette tape. In this case, the laser 

system 18 is replaced with a VCR (magnetic) read head. 
Further details of the video cassette embodiment are 
provided below. 

While Figure 1 is a block diagram, each of the 
blocks represents a conventional commercially available 
element and moreover, the interconnections between the 
blocks are well within the skill of one of ordinary 
skill in the art. 

The rental customer then takes the rental disc 14 
and card 35 to his home and inserts both in his player 
which is shown in block form in Figure 2. - 

The player of Figure 2 includes several major 
elements common to all video disc players. These 
include a drive (not shown for simplicity) for the disc 
14, an optical read device which in this diagram is a 
laser system 60 (similar to element 18 of Figure l) , 
and a disc optical reader 62 similar to optical reader 
12 which drives conventional player electronics 66. 
Thus elements 62 and 66 are conventional and of the 
type that would be provided in any video disc player, 
even one not in accordance with the present invention. 
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A typical method of coding suitable in accordance with 
the present invention would be frequency shift keying. 
Another suitable method is quadrature phased shift 
keying. Decoder 76 thus provides a conventional 
digital signal from the analog read signal from the 
head and amplifier. In the authorization card 
embodiment, decoder 76 would be a simpler digital 
circuit or. may even be dispensed with. 

The decoded data (in digital form) is provided to 
conventional error correction circuitry 78 to find and 
correct any errors in the data. The corrected data is 
then provided to a decryptor 80 which is the 
complementary device to encryptor 26 of Figure l. it 
is to be understood, however, that in the public 
key/private key system described above, the encryptor 
and decryptor are not simple complements of each other, 
in order to provide heightened security. The structure 
of decryptor 80 is that of the type commercially 
available from, for instance, RSA Data for their public 
20 key system. 

The demodulated and decoded data (but not 
encrypted) from the disc optical reader 62 is provided 
to a rental control circuit 84. The function of 
circuit 84 is to pick out the relevant data. This is 

25 relatively simple since the relevant data are known to 
be in particular locations of the initialization region 
of disc 14. The rental control circuit 84 selects 
three data items from the stream of demodulated and 
decoded data. The first item data is the program 

3 0 identification ("program ID"). The second is the 

decryption key (including the modulus) . The third is 
the indication of authorization which provides an 
indication of the disc being a rental or sell disc. In 
this embodiment, the authorization indication is a 

35 single bit; if the value of the bit is 0, this is a 
rental disc. If the value is 1, this is a disc for 
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first input to an OR gate 106. The second input to OR 
gate 106 is the authorization bit. Thus if this is a 
disc for sale, OR gate 106 receives a high input from 
the authorization bit. If the disc 14 is a rental 
5 disc, the authorization bit is 0 and the output of OR 
gate 106 is controlled by the output of AND gate 102. 
OR gate 106 then provides a play enable signal to, for 
instance, player electronics 66 (or to any other 
operating portion of the player) to enable operation 

10 thereof. Thus only if the output signal from OR gate 
106 is high will the player be enabled for operation, 
i.e. playing of the program portion of the disc 14. 
This enablement function can take any one of a number 
of forms in terms of which portions of the player are 

15 enabled. 

Thus it is to be understood that for a rental 
disc, only if the program identification recorded on 
the authorization medium of the disc matches the 
program identification on the optical portion of the 

20 disc, and additionally only if the player 

identification of the player matches the player 
identification recorded on the authorization medium, is 
the player operative for playing the disc. Thus the 
play enable signal, which is the output signal from OR 

25 gate 106, is needed to enable reading of any portions 
of the disc other than the initialization region. 

Digital video disc players are sophisticated 
devices providing high speed digital signal processing 
i.e., have substantial embedded computing power. Thus 

30 it would be relatively inexpensive to include a small 
amount of additional program code to execute in 
software the functions illustrated in Figure 2 in the 
form of logic circuitry. Thus is to be understood that 
while Figure 2 shows a logic circuitry (hardware) 

35 embodiment, conversion of these functions to such a 

computer program is relatively simple and well within 
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magnetic read head located inside the VCR for purposes 
of reading the data recorded on the track 124. a 
similar magnetic head mechanism is used for writing the 
track 124 in the TTRD. Track 124 may be relatively 
5 short and record at a relatively low data density since 
it again only involves approximately 100 bytes of data. 

In this video cassette version, the information 
which in the video disc version is recorded on the 
optical portion of the disc is instead recorded on the 
10 video tape itself. This would be recorded e.g. on each 
frame or perhaps alternate frame in a convenient 
location so that the player can easily find this 
information without having to hunt for any particular 
location on the tape. 

Also in the videotape cassette version there is a 
problem that the program content is of course readily 
altered by proper equipment. Thus it would be possible 
for a hacker to alter the rental control bit, i.e. 
alter a rental control bit from indicating rental to 
indicating this particular video cassette is intended 
for sale (not for rent) . This is undesirable since it 
defeats the entire rental security system. To prevent 
this, the rental control bit, instead of standing 
alone, is the first bit in a block of data all of which 
is encrypted using a private key and decryptable by use 
of a public key stored in the particular VCR player . 
The rest of the data in the block is important picture 
or other data. This would prevent such alteration of 
the rental control bit. 

Another version of the present system for video 
cassette tapes does not require provision of a magnetic 
recording area on the cassette housing or sprocket 
ends. instead, a predetermined portion of the video 
tape is used for recording the encrypted program 
35 identification and player identification. This is less 
desirable since it would require rewinding of the tape 
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instance to the nearest hour, over the life of the 
product. Thus when the renter rents a disc, the TTRD 
at the rental store writes on the authorization card 
the movie identification and a rental date window, for 
5 instance 4 8 hours or 72 hours from the time of the 
rental . 

Then when the renter takes the disc and the 
authorization card home and puts both into his player 
to play the disc, the control circuitry in the player 
10 compares the movie identification from the disc to that 
on the authorization card, and also compares the date 
window on the authorization card to the current date 
and time according to its internal clock. The disc 
will only then be played if the date matches the 
current data and time, and the player identification 
matches . 

It is to be understood that the security in this 
version is less than that in the above described 
embodiments, since a hacker would be able to deduce the 
date window in the encrypted form and provide such a 
date window together with the movie identification in 
encrypted form without use of the authorized 
(legitimate) TTRD and write both of these pieces of 
information on the authorization card. However such 
25 hacker-type authorization would only be good for the 

particular date window which the hacker had obtained in 
encrypted form, i.e. a specific 48 or 72 hours. 

This disclosure is illustrative and not limiting; 
further modifications will be apparent to one skilled 
in the art in the light of the present disclosure and 
are intended to fall within the scope of the appended 
claims. 
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What is claimed: 

^ Player including " h P^yer, the 

uprising the steps of: thereln - *»• method 

"e„ti f r r e "t C Ion aln9 °" « 

medium,f «ith contents of the 

P>rti^« P^ y t 9 th the t PrereC ° rded - * 

".nt lf i C «ro„ y ;:; 0 r:::;t:r; 9 toe p — 

medium and ^ ':„" l ! h tte stents of the 

Particular player" ldentlf nation of the 

Providing an 'authorization player- Md 

-„*h • Player identif icati„„ 

authorization medium, therebv 1<=atl ° n on the 
the medium witnout anting playing 

medium. ° f the etherization 

2. The method of claim i 
authenticating includes encry^np T^" °< 
a PUhlic * ey encryption sys^ ' * * PriVate •* 

3 - The method of ci«i» ■ 
authorization medium is , . * in tha 

connection to a connect ^ ******* *W 

connection on the particular pi, ver . 

4 - The method of claim 
an optically recorded video L " *** *■ 

authorization medium J t°t , Wherein «» 

heated near a center of «« 
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5. The method of Claim l, wherein the medium is. 
a video tape cassette, and the authorization medium is 
a magnetic recording area located on the video cassette 
housing. 

5 

6. The method of Claim 1, wherein the step of 
recording includes magnetically recording, and wherein 
the authorization medium is a magnetic track on the 
medium and spaced apart from the prerecorded contents 

10 of the medium. 

7. The method of Claim l, further comprising the 
step of transmitting the program identification, 
accompanied by a time indication, to a remote location. 

15 

8. The method of Claim 1, further comprising, 
prior to the step of encrypting, reading the program 
identification from the medium. 

20 9 * The method of Claim l, wherein the step of 

prerecording includes prerecording on the medium an 
authorization indication. 

10. The method of Claim 9, wherein the 
25 authorization indication is concatenated with other 
data and encrypted. 



30 



11. The method of Claim 1, wherein the step of 
prerecording includes prerecording on the medium a key 
encryption number for the step of encrypting. 



12. An apparatus for authorizing a prerecorded 
medium for play on an particular player, the player 
including an authorization portion having a player 
35 identification number stored therein, and the 

prerecorded medium having a contents portion including 
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Prerecorded program material an* • , 

*»- iT^:?ZrT ton oapabie ■* 

. ontents portion of the medium- 

an input terminal for receive™ 

a writing circuit adapted for- 

authorization medium. 

13. The apparatus of claim i? ^ 
^ores a plurality of encrvli I " ^ 
private key of a L„ ! 75 ' SaCh bein 9 a 

y of a publlc key encryption systero ^ 

14. The apparatus of Claim i ■» 

encryption kev h* c » • ' wherein each 

-ration key has a unique address in 

further comprisi ng means for retina a """^ 
from the medium reader Dort H E1Vlng a ■«T address 
—cry an encryption ^^00": 

memory address Responding to the received 

writina* 7^ aPParatus ° f ^laim «, wherein ^ 
writing circuit vritoc „ ne 

coition to «JT^L!! !" M ° ry ° ard ada ^ a *« 
Mie writing circuit. 

16. The apparatus of Claim i? 
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wherein the writing circuit records on an authorization 
area located near a center of the optical video disc. 

17. The apparatus of Claim 12, further comprising 
5 a transaction reporting portion connected to the medium 

reader portion, and receiving the program 
identification therefrom. 

18. The apparatus of Claim 16, wherein the 
10 writing circuit includes: 

_a coder portion connected to the encryptor; 
an amplifier connected to the coder portion; 

and 

a magnetic recording head connected to the 
15 coder and positioned adjacent the authorization 

area of the medium. 

19. A method for authorizing playing of a 
prerecorded medium on a player, the prerecorded medium 

2 0 having a contents portion including prerecorded program 
contents, a program identification, and a decryption 
key, the method comprising the steps of: 

reading from the contents portion the program 
identification and the decryption key; 
25 reading from an authorization medium an 

encrypted program identification and player 
identification; 

decrypting the program identification and the 
player identification read from the authorization 
30 medium; 

comparing the decrypted program 
identification and player identification to 
respectively a player identification stored in the 
player and to the program identification read from 
35 the contents portion; and 

if both comparisons indicate a match, 
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enabling operation of the player to », * 
prerecorded media*. Play the 

20. The method of claim i° 
5 decryption key is a °! * Wherein «»• 

encryption system. PUbllC ke * 
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» operation of the player if^T ° f "—"I* 

so indicates. authorization 
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" he " iB t'- 
other information a^ f^heT^ t ° 9 ^ " iU > 
-rypting the authorij^™? 9 ^ - 

«ep of reading Vide ° ai *=- «"« the 

reading .agnetLax" ^T'T^ 

««er of the ^^^^ «~ "ear a 

25. The method of claim io 
Prerecorded ^iu* is . ^ «» 

o. reading fro- the .l^.^"**?' ^ ^ 

"ading fro„ an authorization ar"a on ^ in ° 1UdeS 
housing as the cassette 1. <- Pe cassette 

ssette is inserted into the player 
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program contents, a program identification, and a 
decryption key, the player comprising: 

a prerecorded medium reader portion; 
a control portion connected to the medium 
reader to receive therefrom the decryption key and 
the program identification; 

a reading circuit adapted for reading from an 
authorization medium; 

a decryptor connected to the reading circuit 
and to the control portion, providing a program 
identification and a player identification read 
from the authorization medium in decrypted form to 
the control portion; 

a first comparator connected to the decryptor 
and to the control portion, thereby comparing the 
decrypted program identification to the program 
identification from the content portion of the 
medium; 

a memory storing the player identification; 

a second comparator connected to the 
decryptor and to the memory, thereby comparing the 
decrypted player identification to the player 
identification stored in the memory; and 

logic connected to the first and second 
comparators, providing a signal enabling playing 
of the program contents of the medium if both 
comparators indicate a match. 

27. The player of Claim 26, wherein the 
decryption key is a public key of a public key 
encryption system. 

28. The player of Claim 26, wherein the contents 
portion of the prerecorded medium includes an 
authorization indication, and wherein the control 
portion includes an enablement element providing a 
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signal enabling playina of <-h~ 

prerecorded JiL response ITZT T"" °* 
indication. he auth orization 

decrypting the authorization indication. 

30. The player of clai. 26 , wherein »>. 
authorization aediu* is . „ emory 'J* «*• 

circuit is adapted f or connection tol.^ rM<Un9 

on to tfie memory card. 

31. The player of claim 26, wherein «, 
Prerecorded medium is an optical vld 11, 

reading circuit i nf .i„, oprical video disc, and the 

is in the player the !l SC the Video «»c 

center of ^^^i^""" **** **** at the 

32. The player of claim 26 , wherein «.h 
prerecorded medium is . video t ' * ^ the 
authorization medium is on !! ! • ^ M th * 

video tape cassett^ „ ^ SUrface of the 

authorizationUir :: ^o^ 0 ^ t0 ~- 
inserted into the player. * cassette is 

including: ^ ***** °' 26 ' th * circuit 

a magnetic head; 

an a„ pal „ conne=ted ^ ^ 

^ data decoder connected to the a Bpl i f i«r; 
Oata £££ ° 0rreCti0n POrMOn "~ «• the 
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34. A method for authorizing playing of a 
prerecorded medium on a player, the prerecorded medium 
having a contents portion including prerecording 
program contents, a program identification and a 
5 decryption key, the method comprising the steps of: 

reading from the contents portion the program 
identification and the decryption key; 

reading from an authorization medium an 
encrypted program identification and time window; 
10 decrypting, using the decryption key, the 

program identification and the time window from 
the authorization medium; 

comparing the decrypted program 
identification and time window to respectively the 
15 program identification read from the contents 

portion and a time kept by the player; and 
if both comparisons indicate a match, 
enabling operation of the player to play the 
prerecorded medium. 

20 

35. A player for playing recorded media, each 
medium having recorded thereon program identification 
in encrypted form, a content portion including 
precorded program contents, and a decryption key, the 
25 player comprising: 

a prerecorded medium reader portion*- - 
a control portion connected to the medium 
reader to receive therefrom the decryption key and 
the program identification; 
30 a reading circuit adapted for reading an 

authorization medium having the program 
identification and a time window written thereon 
in encrypted form; 

a decryptor connected to the reading circuit 
35 and to the control portion, providing the program 

identification and time window in decrypted form; 
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a first comparator connected to the decryptor 
and to the control portion, thereby comparing the 
decrypted program identification to the program 
identification from the content portion ; 
5 a clock; 

a second comparator connected to the 
decryptor and to the clock, thereby comparing the 
decrypted time window to a time indicated by the 
clock; and 

10 l0gic co ™ected to the first and second 

comparators, providing a signal enabling playing 
of the program contents of the prerecorded medium 
if both comparators indicate a match. 

15 36 ' A video disc, comprising: 

an optically recorded content portion 
including prerecorded video material and an 
initialization region, the initialization region 
including a data decryption key, a program 
identification identifying the prerecorded video 
material, and a play authorization indication; and 
a magnetic track, the magnetic track being at 
a predetermined location on the disc relative to 
the optically recorded content portion, the 
magnetic track including sufficient area to record 
the program identification and a player -number. 

37. A video tape cassette, comprising: 
a cassette housing; 
30 a ^ngth of video tape mounted on two 

spindles inside the housing; wherein recorded on 
the tape, in addition to prerecorded video 
material, are a data decryption key and a program 

identification of the prerecorded video material- 
35 and ' 

fixed oh one of two locations, selected from 
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a group consisting of an exterior of the housing 
and an end of one of the spindles, is a magnetic 
recording track of a length sufficient to record 
the program identification and a player 
5 identification* 
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